01
Scope of application & addressees
- New Zealand public-service organisations
- Suppliers providing generative AI to public bodies
- Procurement, security, privacy, governance and business-use teams
02
Core regulatory mandates & key requirements
01Appoint a senior accountable official and establish use approval, risk assessment and governance.
02Complete appropriate privacy-impact, security and supplier assessments.
03Provide suitable transparency, challenge routes and human oversight for affected people.
03
Enforcement & compliance timeline
The responsible AI guidance for the public service was released.